Anonymous open relay, multiple times abused by spammers. Complaints to the owners of that IP block are being ignored. 202.96.1.230: Access denied! ======= My complaint 1 ======= Content-Type: text/plain; charset="iso-8859-1" From: Admin Reply-To: abuse@dolphinwave.org Organization: Private person To: Abuse reports , abuse@dolphinwave.org, SUNY@publicf.bta.net.cn, postmaster@publicf.bta.net.cn, richard@proweb.net, postmaster@evidence-eliminator.com, abuse@uk.uu.net, andy@evidence-eliminator.com Subject: [email] Spamming attempt (Usenet harvest, evidence-eliminator.com)! Date: Mon, 27 Aug 2001 01:42:50 +0300 X-Mailer: KMail [version 1.2] MIME-Version: 1.0 Message-Id: <01082701425000.14896@orca.dolphinwave.org> Content-Transfer-Encoding: 8bit Status: R X-Status: N Spam delivery attempt on my e-mail address, used on the alt.pets.pet-rights Usenet forum in May 2001 only (and already expired)! Looking at the spam archives shows other people were also receiving spam from that person earlier this month (22nd and 25th of August): http://groups.google.com/groups?hl=en&safe=off&th=87c068f2e91fe1e7&seekm=843gotolm3u6v9tvi9dhcjova264ft819n%404ax.com Please, terminate spammer's accounts as soon as possible! Refusing to deal with your spamming customers will lead your entire IP range to be blocked by many admins who fed up with spam! Thanks! ======= Spammer: [202.96.1.230] CHINA SHIP RESEARCH AND DEVELOPMENT ACADEMY IP block [202.96.1.224 - 202.96.1.255]. Spamvertised web page: http://www.evidence-eliminator.com/go.shtml?A659187 ======= Sendmail logs (GMT +0300) ======= Aug 26 17:57:25 orca sendmail[14282]: f7QEvMX14282: ... User unknown Aug 26 17:57:26 orca sendmail[14282]: f7QEvMX14282: from=, size=0, class=0, nrcpts=0, proto=SMTP, daemon=Daemon0, relay=[202.96.1.230] -- Alexander Sheremet, dolphinwave.org Admin. ======= My complaint 2 ======= Content-Type: text/plain; charset="iso-8859-1" From: Admin Organization: Private person To: Abuse reports , nanas-sub@cybernothing.org, uce@ftc.gov, SUNY@publicf.bta.net.cn, anti-spam@ns.chinanet.cn.net, postmaster@chinanet.cn.net, postmaster@bta.net.cn, mail-abuse@yahoo-inc.com, richard@proweb.net, andy@evidence-eliminator.com, abuse@uk.uu.net Subject: [email] Repeating spamming attempts (Usenet harvest, evidence-eliminator.com)! Date: Sat, 1 Sep 2001 14:23:01 +0300 X-Mailer: KMail [version 1.2] Cc: david_d_bryant@yahoo.com MIME-Version: 1.0 Message-Id: <01090114230100.01322@dolphin.dolphinwave.org> Content-Transfer-Encoding: 8bit Status: RO X-Status: S My e-mail server's logs have caught two delivery attempts to the e-mail address harvested from the Usenet forum alt.animals.dolphins, and even to the e-mail-looking Usenet Message-ID of my post! Looking at the spam archives shows other people also were receiving that spam 2 days ago: http://groups.google.com/groups?as_q=David.Bryant%40c.com I've also got the same spammer trying to spam my another e-mail address, harvested from another Usenet forum, 5 days ago, spamvertising the same www.evidence-eliminator.com/go.shtml?A659187 page: http://groups.google.com/groups?selm=01082701425000.14896%40orca.dolphinwave.org&output=gplain Please, terminate spammer's accounts as soon as possible! Refusing to deal with your spammers will lead your whole IP space to be blocked by others. Thanks! ======= Spammer: [202.96.1.230] CHINA SHIP RESEARCH AND DEVELOPMENT IP block [202.96.1.224 - 202.96.1.255]. Date: 1 Sep 2001; 03:34:33 (GMT+0300) Remove box: david_d_bryant@yahoo.com Spamvertised web page: www.evidence-eliminator.com/go.shtml?A659187 ======= Sendmail logs (GMT +0300) ======= Sep 1 03:34:33 net2 sendmail[22207]: f811YV022207: ruleset=check_rcpt, arg1=, relay=[202.96.1.230], reject=553 5.1.8 ... Domain of sender address David.Bryant@c.com does not exist Sep 1 03:34:33 net2 sendmail[22206]: f811YV022206: ruleset=check_rcpt, arg1=<5044579.kLgytDmvXU@dolphinwave.org>, relay=[202.96.1.230], reject=553 5.1.8 <5044579.kLgytDmvXU@dolphinwave.org>... Domain of sender address David.Bryant@c.com does not exist Sep 1 03:34:34 net2 sendmail[22207]: f811YV022207: from=, size=0, class=0, nrcpts=0, proto=SMTP, daemon=MTA, relay=[202.96.1.230] Sep 1 03:34:34 net2 sendmail[22206]: f811YV022206: from=, size=0, class=0, nrcpts=0, proto=SMTP, daemon=MTA, relay=[202.96.1.230] ======= Spam complaint ======= http://groups.google.com/groups?selm=3B8DB710.856C50F3%40teleport.com&output=gplain From: "A. Murphy" Newsgroups: news.admin.net-abuse.sightings Subject: [email] YOU HAVE SECRET ENCRYPTED DATABASES ON YOUR PC!!! - Protect Yourself with Evidence Eliminator Followup-To: news.admin.net-abuse.email Date: Thu, 30 Aug 2001 03:46:21 +0000 (UTC) Organization: VeriMod () Lines: 73 Approved: nanas-sub@cybernothing.org Message-ID: <3B8DB710.856C50F3@teleport.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit X-Trace: victor.killfile.org 999143181 32302 216.43.25.138 (30 Aug 2001 03:46:21 GMT) X-Complaints-To: usenet@killfile.org X-Accept-Language: en Processed-By: Bob the NANAS ModBot X-Auth: PGPMoose V1.1 PGP news.admin.net-abuse.sightings iD8DBQE7jbcNv1i8LqUfqQURArbnAJ9Ywm7GA9PYtTnkFt+P7S5MLONnLwCfS+NI NtOCx9PdRIOv21Zv1387v64= =WDGU X-Group-Homepage: X-Mail-Path: root@unagi.cybernothing.org!atlantic.mail.pas.earthlink.net!i48-06-42.van.du.teleport.com!amurph@teleport.com X-Modbot: Bob the NANAS ModBot X-No-Confirm: yes X-Original-Cc: relays@mail-abuse.org, "news.admin.net-abuse.sightings" , uce , SpamRecycle X-Original-Date: Wed, 29 Aug 2001 20:46:24 -0700 X-Original-To: richard@proweb.net, postmaster@evidence-eliminator.com, abuse@uk.uu.net, andy@evidence-eliminator.com, postmaster@bta.net.cn X-Submissions-To: nanas-sub@cybernothing.org richard@proweb.net, postmaster@evidence-eliminator.com, abuse@uk.uu.net, andy@evidence-eliminator.com -- www.evidence-eliminator.com [62.189.236.70] postmaster@bta.net.cn -- anonymous open relay: relay: 202.96.1.230 (note to MAPS: relay requires rDNS '-r lc2000.domain2000') -------- Original Message -------- Status: U Return-Path: Received: from localhost.com ([202.96.1.230])by penguin (Earthlink/Onemain SMTP Server) with SMTP id toqnru.clh.37tiu46for ; Wed, 29 Aug 2001 14:32:43 -0700 (PDT) From: David.Bryant@c.com To: amurph@teleport.com Date: Wed, 29 Aug 2001 22:33:56 +0000 Subject: YOU HAVE SECRET ENCRYPTED DATABASES ON YOUR PC!!! - Protect Yourself with Evidence Eliminator X-Mailer: MailXSender 1.05 MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Message-Id: <200108291432.toqnru.clh.37tiu46@penguin> X-Mozilla-Status: 8001 X-Mozilla-Status2: 00000000 X-UIDL: toqnru.clh.37tiu46.0 If you are worried about what your family or the authorities might find on your P.C. then worry no more..... We have the answer.... It is the best bit of software on the market. E.E. is the program that will permanently delete the hidden databases, log files of all your activities, histories, illegal images e.t.c. Be safe. Worry no more. Sleep easy. Have a clean machine. REMOVE THE EVIDENCE NOW! Remember that you are constantly under surveillance... Click here for details on the EVIDENCE ELIMINATOR: www.evidence-eliminator.com/go.shtml?A659187 Clear your computer of incriminating files that you cannot delete. THIS IS A MUST READ!!!! ********************************************************** This is not spam. Your email address has been opted in and double verified to receive promotions on our mailing list. To remove yourself from this subscription mailing list, send an email to david_d_bryant@yahoo.com with "REMOVE" in the subject. ********************************************************** -- All postings to news.admin.net-abuse.sightings are unconfirmed and unverified unless stated otherwise by the moderators. All opinions expressed above are considered the opinions of the original poster, not the moderators or their respective employers. For a copy of the guidelines to this group, see: